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ABSTRACT 



The present invention relates to a locking device 2 for 
objects of use, which are to be used for a particular period 
of time by a user, whereby the locking device 2 opens after 
the input of an opening code 4. The locking device is 
distinguished in that after input of an end code 6 the locking 
device issues a confirmation code (8) and changes the i 
opening code in a particular manner (4— •■4'). Further, the J 
invention relates to a method for the controlled, time- | 
restricted, use of objects of use, which employs the locking / 
device 2. In this method, an op ening codc^ is issued by an I 
access co ntrol unit 1, th e operiing code 41s input into the / 
lockinfHevice 2 for opening the same, an end code 6 is input! 
for ending the use and then a confirmation code 8 is issued,! 
the opening code being altered (4^4*) by means of the! 
locking device 2. 

31 Claims, 1 Drawing Sheet 
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LOCKING DEVICE FOR SYSTEMS ACCESS 
TO WHICH IS TIME-RESTRICTED 

BACKGROUND OF THE INVENTION 

The invention relates to a locking device for objects of 
use, to be used for a restricted period of time, and a niethod 
for the controlled use of the objects of use. 

Electronic access authorization systems offer, in compari- 
son with mechanical locking systems, a much higher degree 
of flexibility in the individual issue and withdrawal of access 
authorizations. 

Many different forms of such electr onic access autho ri- 
zation s ystems are known which employ diffcring ^commu- 
nications_ 2rocedures and identification ^ meai^s.^tliese 
incl udes for e xample cards,_magnetjc_ cards. chip car ds, 
pro cessor chip cards .Jransnnndf.rs and th g-like. whe reby the 
data ^xchan^e tak es^lace-^v4a-elcctrina1 cprii^ct srerec tro- 
magne tic or infrared sig na ls and the like. Further, the re are 
known combination locks which are operated by the entrp^of 
codes via a key pad and which employ particular protocol s 
and algorithms for controL aiui^epfegFamming. 

The principle of code switching, which brings about an 
increase in security against improper information monitor- 
ing (bugging) is found in a series of publications such as e.g. 
DE 27 35 048 02 or DE 43 25 137 Al. However, these 
systems are based upon the employment of intelligent keys, 
equipped with memories. 

DE 30 31 405 and a series of similar systems, which are 
based upon sophisticated code conversion methods, involve 
storage of access authorization relationships in the lock or in 
a key. 

With all such systems it is disadvantageous that the 
checking of the access authorization of the user takes place 
directly and locally in the lock itself, so that the access 
authorization information must be stored in the lock and/or 
in the key. This brings about the following problems; 

The loss of a key means that there is a risk of misuse for 
all locks which the key fits. In the case of loss, these locks 
must all be so reprogrammed, at their locations, that the lost 
key is in future rejected. 

The same applies to key-less systems which work only 
with the input of codes via a keyboard, in the case that a code 
becomes known or is detected by improper monitoring 
(bugging). 

It is further disadvantageous that the programmed access 
authorization relationship can be checked or changed only 
with diflSculty, because all locks concerned and/or keys must 
be checked and reprogrammed. The effort involved thus 
increases rapidly with increasing complexity of the access 
authorization relationship between users or keys or codes 
and locks, and requires a high level of organisation. 

In DE 20 58 623 there is described a device which 
overcomes the above-mentioned disadvantages in that the 
access relationship is administered in a central access con- 
trol unit, whereby, however, a cabling the locks with the 
access control unit is necessary, which is of disadvanta- 
geous. 

In DE 24 01 602 C2, which is most closely related to the 
invention set out here and which likewise employs a central 
code issuing device and decentral locking devices, the 
significant disadvantage of a need for cabling is removed. 
There is described a method for the alteration of lock 
combinations specifically for use in hotels, which is based 
upon the fact that the end code of a cycle n is the same as 
the opening code of the cycle n+l, so that the first input of 
a new code deactivates the old code. 
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With regard to employment in a hire system, it is however 
disadvantageous with this system that the end of the cycle of 
use cannot be determined by the current user but only occurs 
with the beginning of the next cycle of use; that is, is 

5 initiated by the next user. This means, inter aUa, that the 
current user cannot prove that his current cycle of use has 
ended. This, however, excludes employment in a hire sys- 
tem. It is further disadvantageous with this system that 
problems can appear when the code issuing unit and a 

10 locking device **get out of step**; that is, are no longer 
synchronized. 

In DE 43 01 039 C2 there is described a method for the 
release of vehicles for a particular user, dependent upon a 
reservation. This, however, requires high technical outlay 
15 (cordless telephone) in relation to the object of the use, and 
fixed parking places in the vicinity of hire stations. 

SUMMARY OF THE INVENTION 

One object of the invention is to make available a locking 
20 device for objects of use, which are to be used for a 
partic ular period of time bya user, which avoids the disad- 
v antages of the described locking devic es . 

A further object is to make available a method by means 
of which the controlled, time-restricted use of objects of use 
is made possible. 

In accordance with the invention, this object is achieved 
by a locking device for objects of use, which are to be used 
for a particular period of time by a use, whereby the locking 
deviceo pensafter the input of an opening code. After inp ut 
of an end code, the locking device issues a confirmation 
code and changes the opening code in a particular manner. 
Further, in a ccordance v/\th a met h od for contr oUed. time- 
re stricted use of objects, an opening code is issued by an 
ac cess control^umt mto the lockmg oevice, and^n end code 
is input for ending the use, A .confirmation c ode is then 
is^su ed , and 4 he opcning^ode is ch anged. 

Further features and advantagescanT>e understood from 
the following description. 

BRIEF DESCRIPTION OF THE DRAWING 

Below, the locking device in accordance with the inven- 
tion will be described with reference to an exemplary 
embodiment and with reference to the drawing, which 
illustrates a locking device in accordance with one embodi- 
ment of the invention, 

DETAILED DESCRIPTION 

A locking system consisting of one or more locking 
devices 2 and one or more central access control units 1 is 
illustrated in the drawing. 

The locking device 2 works with four codes, namely a 
code request code 3, an opening code 4, an end code 6 and 
a confirmation code 8. 
55 The codes are entirely or partially variable in such a 
manner that they change completely or partially with each 
cycle of use. This principle is known as code switching. 

Each cycle of use extends from the first opening by means 
of the first input of the opening code 4 up to the final locking 
60 through the input of the end code 6. 

The code switching protocol is secret and known only to 
the locking device and the access control unit. Between the 
codes there may partially be a secret relationship such that 
in fact only one of the codes is altered in accordance with the 
65 code switching protocol and the other codes are conse- 
quently partially adapted so that they again satisfy the secret 
relationship. 
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The codes and the code switching protocol thereby have in particular in the case of employment in hire systems. Also 

the property that, even when observed over many cycles of this confirmation code 8 can expediently include additional 

use, a relationship between the codes of a user cycle data, e.g. concerning the distance travelled or number and 

amongst one another or between the codes of successive kind of employed functions of the object of use, which then 

user cycles cannot be determined or can only be determined 5 can be evaluated or stored by the access control unit 1 for the 

with very great effort The code switching protocol or the purpose of biUing. The billing may consist e.g. in the return 

relationsh^ between the codes one to another is thereby ^ previously made deposit, less the use fee. For this 

Ideally different for each locking device, so that breaking of ^^^^^^^^ ^^^^ ^ encryption or by means of 

the code can only cause Imiited consequential damage. ^^^^^^^^ ^^^^ recommended. 

The code request code 3 consists, in the simplest case, mT-u^rtJu* 

11 f c J u- . II- ^ • u V. J The transfer or codes between access control unit 1 and 

solely of a fixed objector locking device number. It need not ii-j-^ Lrc.ji. ^i. 

u • ui u » c 11 L • ui T. c locking device 2 may be effected by means or clectromag- 

be variable, but it can usefully be variable. It serves, so far ■ 1 l • r j • 1 .1 -.l . 

-J • c r D^tic signals, such as e.g. infrared signals, entirely without 

as it IS variable, on the one hand as information for a • 1 / ^. _r c .a. ' ^ 

, . , . -.L^u t_- *L r I.' J * involvement on the part or the user, 

potential user, who with the object before him can determine ^ 

therefrom whether this object is presently in use. On the , , Equally possible is the employment of different kinds of 

other hand, it identifies the use cycle and use condition and ^^^"^^ "^^^^^ ^^^^^ ^'^^o ^^"^ 

communicates as initial input information to the access ^f^^" Conceivable as carrier mediums are magnetic cards, 

control unit 1 not only which locking device 2 is to be ""^'P processor chip cards, magnetic coded paper 

opened but also in which use cycle and Condition this stnps, paper stnps wuh punched hole patterns or printed bar 

locking device is at present. This increases the reliability of """"fl "^y^^^^ infrared-signal-controlled automobile keys 
the synchronization of the locking device 2 with the access 

control unit 1. The code request code 3 can, moreover, 1° entirely or partially manual embodiments, the code 
include additional data concerning the condition of the transfer could be effected by means of simple reading from 
object of use, such as e.g. an initial counter value or the like. LCD displays and input via keypads. 
This additional data should thereby be encrypted, as pro- 25 In all variants, for bridging larger distances, the transfer of 
tection against manipulation, or be secured by means of an codes can be effected in part via a telephone line, 
encrypted check sum. The proof of authorization of the user with regard to the 
The opening code 4 corresponds to a temporarily valid access control unit 1 can be effected in accordance with a 
key and controls the opening of the lock; that is, the release method known from the state of the art, e.g. via a magnetic 
for use of the object controlled by the locking device 2. 30 ^ ^^^P °^ ^ processor chip card or a biometric 
When it is input, the lock opens and the object can be used. procedure or an exchange of coded signals, e.g. by means of 
This applies exactly for the period of the current cycle of an infrared signal key module or by means of the simple 
use; that is, if appropriate, for a plurality of opening input of a secret code via a keypad. The access control unit 
procedures, whereby a temporary re-locking of the lock 1 can thereby exercise various functions. This extends from 
without code, e.g. by means of mechanical locking or a 35 the simple receipt of a deposit with final return of a remain- 
simple key signal, can take place. With the expiry of the use ^er amount, up to storing of all use procedures and billing 
cycle, the opening code 4 loses its validity, due to the code way of a bank account. 

switching. The opening code 4 may expediently contain In the following the method in accordance with the 

additional information, originating from the access control invention for the controlled use of objects of use will be 

unit 1, intended for the object of use, by means of which e.g. 40 described with reference to an exemplary embodiment and 

the number or the kind of use procedures for the object of with reference to the drawings: 

use, or the period of use, can be restricted. This additional The code request code 3, which may contain (encrypted) 

data also should thereby be encrypted, to protect against status data of the object of use, is taken from the object of 

manipulation, or seciu-ed by means of an encrypted check use which is intended to be used, or from the locking device 

sum. 45 2, and entered into the access control unit 1, whereby the 

The input of the end code 6 marks the end of a cycle of locking device 2 to be opened and if appropriate its condi- 

use. Upon input of this code, the lock device must either tion is identified. Additionally, with respect to the access 

already be in the locked condition or it goes into the locked control unit 1, it is determined (9) in accordance with a 

condition. The confinmation code 8 is issued and the code method corresponding to the state of the art whether the 

switching effected (4-»4') An opening anew is then only 50 authorization for opening the locking device 2 identified by 

possible given the request of the new opening code 4* from the code request code, and thus the authorization for use of 

the access control unit. The end code 6 may consist solely of the corresponding object of use, is confirmed and if appro- 

a simple signal, which indicates the end of the cycle of use. priatc that a deposit has been paid. In the case of a positive 

Expediently, however, this should only be actuable by the result of this check, the currently valid opening code 4 for 

legitimate user; thus the end code 6 should only be acces- 55 the locking device 2, in which there may be contained also 

sible or known to this legitimate user. The end code 6 may additional data for evaluation by the object of use and the 

thereby expediently stand in a simple relationship to the control unit of the same, is issued. 

opening code 4, for example the opening code 4 in the This is entered into the locking device 2, whereupon the 

reverse order or consist of an additional number and the lock opens (5) and the object of use can be used. A 

opening code 4, or it can be equal to the opening code, but 60 temporary re -locking and re -opening with the opening code 

thereby only have its effect as end code 6 through actuation 4, e.g. in the case of vehicles, is possible during the use 

of an additional signal cycle. The code request code 3 can be modified for the 

The confirmation code 8 is provided for the final input diu-ation of the use cycle in such a manner (3-*3*) that for 

into the access control unit 1 . In relation to the access control a user who comes across a locked object of use it is apparent 

unit 1 it serves as proof of the ending of the use of the object 65 that this object is already in use. 

of use controlled by the locking device 2, releasing the user If the use is to be ended, the end code 6 is entered. This 

fromresponsibility. This confirmation code is of significance can expediently consist e.g. of the opening code 4 in 
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combination with an additional signal. If necessary, the 
locking device then goes into a locked condition (7), insofar 
as it is not already in such a condition, issues the confirma- 
tion code 8 and so switches itself by means of the code 
switching that further use is possible only if another new 
opening code 4' is requested. The confirmation code 8 can 
again be entered into the access control unit 1, whereby the 
end of the use of the object of use can be determined, to 
release the user from further responsibility for the object of 
use, and if appropriate with the aid of additional (encrypted) 
data contained in the confirmation code 8 there can be 
effected a final billing, such as e.g. the return of a deposit or 
the like. The request code 3* can, thereby, be so modified 
(3*->3*) that from this code it can be clearly determined on 
the one hand that a new use cycle has started and on the other 
hand the condition (not in use) can be clearly determined. 
This ensures the synchronization of the locking device 2 
with the access control unit 1. Expediently, the new code 
request code 3' may be the same as the previous confirmation 
code 8. 

The advantages of the invention are the following: 

On the one hand, the user can himself determine the end 
of the use procedure, and on the other hand can prove that 
the use has ended. These are important prerequisites for a 
hire system, which the above -described devices and meth- 
ods of the state of the art do not fulfil. 

The synchronisation between locking device and access 
control unit is ensured by means of the employment of the 
code request code 3, which is not the case with the above- 
mentioned, known methods. 

For the locking devices 2, of which a number are present, 
a cheap, less secure code input/output method can be 
chosen, e.g. a simple keypad and a simple LCD display, but 
in contrast there can be selected for the use authorization 
check 9, with regard to the access control unit 1, of which 
as a rule only one is present, a more complex, expensive 
method, such as e.g. a processor chip card. 

The logic to be implemented in the multiply present lock 
devices 2 is very simple and consists in substance only of an 
opening code comparison and a code switching algorithm, 
which makes possible economical manufacture. 

Seciu-ity is high, because improper monitoring (bugging) 
of the communication with the locking device 2 can scarcely 
cause damage, since the information obtained becomes of no 
value with the ending of the use cycle. Since possibly 
employed keys (carrier mediums for code transfer) have 
only temporary validity, a loss of the same does not involve 
consequent greater damage or lock reprogramming, as is the 
case with systems having permanently valid keys. 

An information connection between access control unit 1 
and lock unit 2 does not need to be simultaneous and 
"online", but can make use of intermediate carrier media. 
This makes possible a spatial and temporal separation of the 
authorization check 9 from the locking procedure 5. 
Together with the employment of a telephone connection 
this allows e.g. a simple and cost saving bridging of dis- 
tances of any size, between a central access control unit 1 
and a plurality of arbitrarily located locking devices 2, as 
will be described in a later example. 

The invention thus makes possible the setting up of a hire 
system which has the following possibilities and advantages: 

complete automation, and therewith cost reduction and 
24-hour operation; 

decentral distribution of the hire stations or of the objects 
of use; 

central, simple administration of frequently changing user 
authorization relationships; 
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processing of hire procedures without physical transfer of 

keys or documents. 
In the following there will be described an example of 
employment of the invention: 
5 An automated bicycle hire system is involved, with which 
there is made possible, for a registered group of users, access 
to a number of arbitrarily located bicycles in an area, at any 
time, whereby use data is to be detected for reasons of 
security and for the purpose of billing. Hiring out and return 
are effected by means of communication with a computer via 
10 telephone. 

The locking device 2 consists in a bicycle lock which has 
the properties according to the invention: the input medium 
is a keypad, the output medium a e.g. six character LCD 
display. In the locked condition, the bicycle cannot be 

15 moved, which can be additionally ensured in that an appro- 
priate alarm device in accordance with the state of the art is 
integrated which is activated upon locking. In the unlocked 
condition, the alarm device is deactivated and the bicycle 
can be moved and ridden. 

The access control unit 1 consists in a computer system 
which is connected with telephone lines via conventional 
modems. The control and data input by a calling user is 
effected by means of multi-frequency dialling tones, which 
one can generate with most telephones via the telephone 
keys or with cheap, common auxiliary devices. Such com- 

25 puter systems are state of the art, e.g. in automatic telephone 
banking systems. 

A cycle of use runs as follows: 

The bicycles are, as agreed, deposited in the vicinity of 
telephone call boxes. The user locates such a deposited 

30 bicycle and wishes to use it. For this purpose he reads a 
bicycle number and, from the LCD display on the locked 
lock, a further number. The combination of these numbers 
constitutes the code request code 3, With this information he 
enters the telephone call box and calls the access control 

35 computer 1. This requests him to input his user number, his 
secret number (PIN) (9), and the combined code request 
code 3, consisting of the bicycle number and the number 
indicated on the lock. The user data is checked, the coded 
request code 3 compared, if appropriate, with the stored 
condition data of the bicycle concerned, the authorization for 
use of this bicycle is checked, the new hire condition stored 
and the multiple-character opening code 4 associated with 
this bicycle and the current use cycle is determined. This 
opening code 4 is then communicated to the user acousti- 
cally. The bicycle concerned is thereupon regarded, in 
accordance with contract, as hired by the user concerned. 
The user can now open the lock by input of the opening code 
4 and then use the bicycle. During the use, he can close the 
lock at any time and again open it through renewed input of 
the opening code 4. The code request code 3 displayed on 

50 the LCD display is blanked during the tise cycle and in its 
place an indication 3* displayed, which indicates to a 
potential subsequent user that this bicycle is already in use. 
At the end of the use, the user deposits the bicycle again, in 
accordance with the agreement, e.g. in the vicinity of a 

j5 telephone call box. He closes the lock, presses a special end 
key and once again enters the opening code 4. The lock 
interprets the combination of end key and opening code 4 as 
the input of the end code 6. Thereupon it switches to a new 
use cycle and carries out the code switching (4-*4') whereby 
the confirmation code 8 is displayed on the LCD display. 
This confirmation code 8 of the previous use cycle is at the 
same time the new code request code 3', which will be found 
by the next tiser. For the user, the confirmation code 8 serves, 
with regard to the access control computer 1, as proof that 
the use has ended. A continuing use with the old opening 

65 code 4 is, of course, not possible after the code switching. 
Thus, the user again enters the telephone call box, calls the 
access control computer 1, identifies himself to this com- 



01/02/2004, EAST Version: 1.4.1 



6,0! 

7 

puter and enters the confirmation code 8. The computer 
compares this with the stored, expected code, and in the case 
of correspondency the bicycle is registered as returned. The 
use data can thereby be stored for billing purposes. Further, 
it is also conceivable that the user will be asked to enter the 
location number of the telephone call box in which he is, so 
that the computer can detenmine the location of the bicycle 
concerned therefrom, with the aid of a corresponding direc- 
tory. Further, the computer can offer an information function 
so configured that upon input of a present location by means 
of the telephone call box location number or the user's own 
telephone number, the location of the nearest bicycle is 
determined and given out. 

The advantages of the described system with regard to 
manual systems are found in the temporal and spatial 
independence of hiring out and return. The advantages in 
comparison to existing automatic systems lie in the inde- 
pendence of the return location and the simple administra- 
tion of the access authorizations by means of a central 
computer, and in simple billing and effective, complete 
control 

The procedure described in the above example can be 
applied to other fields of use. 

Clearly, application for car sharing clubs, hire car fleets or 
company vehicle fleets is possible. In the following there 
will be described an exemplary embodiment for a car 
sharing club. 

Each customer or club member has a special club key. 
This is constituted as follows: a mechanical key bit, identical 
for all club keys, mechanically unlocks the steering wheel 
locks of all vehicles, which locks all lock in the same 
manner. In the interior of the club key there is a microchip 
which releases the electronic immobilizer. An infirared inter- 
face serves for communication with the central locking 
system. This specification corresponds to the state of the art 
in new vehicles. Additionally, the key has a small keypad 
and a multi-frequency tone code transmitter, as is state of the 
art for hand transmitters for the remote control of telephone 
answering machines. 

The vehicle use functions as follows: the user calls, from 
any telephone, the central reservations office. He activates 
the club key by means of the input of a key PIN. Authen- 
tication with regard to the access control unit 1 in the central 
reservations office is effected in that the customer holds the 
code transmitter of the club key to the mouthpiece and 
presses a special key. The club key transmits to the central 
reservations computer, by multi-frequency signal, an 
authentication code. After checking of access authorization, 
the opening code 4 is acoustically indicated to the user. The 
user enters this code via the key's keypad. The club key is 
now primed. Alternatively, the transfer of the opening code 
4 from the reservations computer 1 to the club key could be 
effected by multi-frequency signalling. This would, 
however, require higher technical outlay for the club keys, 
many of which will be present. A securing of the transferred 
code against unauthorised monitoring (bugging) can be 
readily implemented by means of cryptographic means. 
Thus, e.g. it can be ensured that the opening code is valid 
only for a particular club key. 

In the vehicle, the features of the invention can be 
implemented by means of software adaption in the central 
locking and immobilizer control unit: the central locking 
opens upon input of the currently valid opening code 4 by 
infrared signal, Tlie immobilizer releases the ignition cir- 
cuitry upon receipt of the currently valid opening code 4 
from the club key microchip. Cryptographic securing meth- 
ods (code switching, public-private key encryption), as are 
state of the art for communication between the club key and 
the central locking or immobilizer, can be integrated into the 
code exchange principle in accordance with the invention: 
within a user cycle the locking function acts for interim 
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locking and re -opening in a conventional manner. The end of 
the use cycle is initiated by the user by means of pressing of 
a special end key on the club key. The end code 6 is 
transferred to the central locking system by infrared sigrial. 

^ The central locking system effects the code switching 
(4-^4') and re-transmits the confirmation code 8. 

Additionally, there is a clear possibility for the transfer of 
reservation and trip information. There may be contained in 
the opening code 4, or transferred with it, e.g. information 
about a maximum use period, the immobilizer blocking the 

10 ignition if this period is exceeded. There may be contained 
in the confirmation code 8, or transferred with this code, e.g. 
information about the distance travelled, exceeded maxi- 
mum speeds or information concerning accidents, impacts 
or other irregularities delivered from an accident data 

15 recorder. A GPS satellite navigation system may determine 
the actual return location and transfer this in a manner secure 
firom manipulation. 

The confirmation code 8 and the transferred additional 
data are intermediately stored in the microchip of the club 
key. The return of the vehicle functions analogously to the 
hiring out. The customer calls the central reservations office 
and transfers via the multi-frequency code transmitter of the 
club key the intermediately stored confirmation code 8 and 
possibly also additional data, to the reservations computer. 
There, the data is evaluated and stored and the vehicle 

25 registered as returned. 

The advantages of the described system are the following: 
The greatest advantage is the absence of a need for central 
hiring stations. The vehicles can be left at arbitrary locations. 
This expands the circle of users, increases acceptance and 

30 reduces costs. 

Advantageous in comparison with conventional manual 
hiring procedures is the removal of the labour-intense 
administrative effort for authorization checks, vehicle key 
issuing, registration, key return, data collection and data 

35 processing. 

Advantageous with regard to the procedures widely prac- 
tised in car sharing clubs is the removal of the significant 
security risk and the lack of control, which arise due to the 
employment of a central safe which contains the keys of all 
vehicles and to which all participants have a key. An 
additional advantage is the automatic, direct registration of 
trip data, which can be evaluated directly computer-aided. 
The inconvenient use of vehicle log books is not needed. 

Advantageous for the user in comparison to competing 
systems is that he need not have a chip card and need not 

45 operate an on-board computer. For him, after the priming of 
the club key, the vehicle use functions as with a private 
vehicle. He opens the central locking, starts the ignition and 
drives away. Advantageous for the operator is the absence of 
investment in on-board computer hardware. 

50 Advantageous in relation to credit card based automatic 
machine systems with key safes, is the simplified and 
speeded-up procedure involved. For the operator the in 
vestment and main tenance costs for automatic machines 
and key safes are not needed. 

55 Advantages with respect to competing solutions on the 
basis of data connections via radio networks are cost savings 
for radio hardware and transmission fees, lack of depen- 
dence upon particular locations and security against system 
failure. 

A further possible application for decentral objects of use 
is described in the last example. In a copy shop, a largely 
automated operation is to be made possible and high cost 
investments in additional hardware for billing purposes, in 
relation to the multiply present copying apparatuses, are to 
be avoided. One realisation of these requirements could be 
65 as follows: 

Billing a nd money collection is effected by means of a 
central automatic machine, of which only one is present, 
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which accepts a deposit and issues an opening code for a 18. A method according lo claim 15, wherein additional 

particular copying apparatus. The required functionality on data concerning the object of use is contained in the con- 

the part of the apparatus can be integrated by means of a finnation code and/or in the code request, 

simple control software adaptation without mechanical -,o a i , u jj *- i 

modification, in the copying apparatus, in a cost effective , , ^ method according to claim 1 wherein additional 

manner. Cabling of the individual apparatuses with central ^ ^^^^ contamed m the openmg code (4) output from the 

counters is not necessary, and neither is the installation of access control unit. 

coin -operated machines or card readers at the apparatuses. 20. A method according to claim 19, wherein additional 
Through input of the opening code, the apparatus is set in data concerning the object of use is contained in the con- 
function for a maximum number of copies and time, by finnation code and/or in the code request, 
means of additional data coded therewith. In the finally- lO 21. A method according to claim 1. wherein additional 
obtained confirmatioii code, the actually used copies are j^^^ concerning the object of use is contained in the con- 
coded m, from which the central unit, together with the lime ^ j /o\ j/ • *u j * j /i\ 
spent, calculates the fees and returns the remaining deposit. ^^f °° "l^.^ code request code (3). 
What is claimed is* 22. A locking device for objects of use, which are to be 

1. In a system for the controUed, time-restricted use of 15 ^ particular period of time by a user, the locking 
objects of use with a locking device and an access control device comprising: 

unit, a method comprising means for unlocking the locking device in response to an 

the access control unit (1) issuing an opening code (4), opening code; and 

the locking device (2) receiving the opening code (4) to ^^^^ fo, ^(ering the opening code and issuing a con- 
unlock an object of use controlled thereby, 20 g^^^^^ ^^^^^^ ^ ^^^^ j^^^^y ^^^^ 

inputting an end code (6) into the locking device for confirmation code serves as proof of the ending of the 

endmg use of the object, and 

the locking device outputting a confirmation code (8) and , ' 

changing the opening code (4-*4'). ^b"^^" ^^^^^^ ^^^^^^ ^ confirmation code and 

2. A method according to claim 1, fiirther comprising 25 changes the opening code in response to an end code, 
inputting a code request code (3) from the locking device to 23. A locking device accordmg to claim 22, wherem 
the access control unit (1). locking device further includes means for transferring data 

3. A method according to claim 2, wherein the confirma- that corresponds to the opening code and the end code, 
tion code 8 of a first use cycle n is the same as a next code 24. A locking device according to claim 23, wherein the 
request code (3') of a next use cycle n+1. 30 means for transferring data is comprised of a keypad and 

4. A method according to claim 3, wherein additional data display on the locking device. 

is contained in the opening code output from the access 25. A system for locking objects of use, which are to be 

control unit. used for a particular period of time by al user, comprising: 

5. A method according to claim 3, wherein additional data ^ ^^^^^^^ ^^^^ ^^^^^^ 
concerning the object of use is contained in the confirmation 35 

code and/or in the code request, ^^^t one locking device; 

6. A method according to claim 2, further comprising wherein the locking device provides a cycle of use in 
checking use authorization (9) for the object of use with the which a locking device provides a request code from 
access control unit (1). which the central access control unit issues an opening 

7. A method according to claim 2 wherein the end code ^tiat enables the user to open the locking device; 
IS related to the opening code m a defined manner. ^^.^^ j^^^ ^^^^ ^^^.^^^ ^ ^^g^^. 

8. A method according lo claim 2, wherem additional data . , . ° j jju *u 
is contained in the opening code output from the access ^P«° 

control unit. opemng code. 

9. A method according to claim 2, wherein additional data 26. A system according to claim 25, wherein the confir- 
concerning the object of use is contained in the confirmation +5 mation code is provided to the central access control unit to 
code and/or in the code request. serve as proof of the end of use of an object controlled by 

10. A method according to claim 1, further comprising the locking device. 

checking use authorization (9) for the object of use with the 27. A system according to claim 25, wherein the central 

access control unit (1). access control unit determines whether the user is authorized 

U. A method according to claim 10, wherein the end code 50 to use an object controlled by the locking device upon 

is related to the opening code in a defined manner. receipt of the request code. 

12. A method according to claim 10, wherein the confir- 28. Asystem according to claim 25, wherein the end code 

mation code 8 of the use cycle n is the same as the code ^ related to the opening code in a defined manner, 

request code of the use cycle n+1. 29. A system according to claim 25, wherein the confir- 

U. A method according to claim 10, wherein additional 55 ^^^^^ ^^^^^ ^ ^^e code request code for a next 

data IS contained in the opemng code output from the access subsequent cycle of use. 

control unit. 30. Asystem according to claim 25, wherein the opening 

14. A method according to claim 10, wherein additional , . /, , j ^ . l- V *u l c 
data concerning the object of use is contained in the con- ^^1^ f f l^^il 1' M ihc number of uses 
firmation code and/or in the code request. the object controlled by the locking device, the period of 

15. A method according to claim 1, wherein the end code ^^e of the object controlled by the locking device, or the type 
(6) is related to the opening code (4) in a defined manner. »be object controlled by the locking device, can be 

16. A method according to claim 15, wherein the confir- restricted. 

mation code 8 of the use cycle n is the same as the code 31. A system according to claim 25, wherein the confir- 

request code of the use cycle n+1 . mation code and/or the request code includes additional data 

17. A method according to claim 15, wherein additional 65 regarding the object controlled by the locking device, 
data is contained in the opening code output from the access 

control unit. * ♦ * * ♦ 
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